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(54) INFORMATION DISTRIBUTING SERVER DEVICE 

(57)Abstract: 

PROBLEM TO BE SOLVED: To provide an information 
distributing server device which can authenticate a user 
without depending on terminal environment and can manage 
the valid period of authentication in information service on 
the Internet. 

SOLUTION: The device is provided with a request recording 
part recording a request from an authenticated user, a 
recording information monitoring part which periodically 
inspects the record of the request recording part and 
deletes expired record and an access control part which 
urges user authentication information when the accessed 
user is not authenticated and authenticates the user by 
collating information with management information which is 
previously registered if the user is authenticated and 
returns a requested content with respect to the 
authenticated request. The users are authenticated for the 
respective contents and the authenticated user is 
requested to be authenticated again when prescribed time 
elapses. Consequently, the user is authenticated with high 
safety without depending on the environment of a terminal unit. 
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* NOTICES * 

JP0 and INPIT are not responsible for any 
damages caused by the use of this translation. 

1 This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

mhtml:file://C:\Documents and Settings\rippg\Local Settings\Temp\wz54ba\Citation info\D.. 



3/8/2011 



JP- A-2002-26904 1 Page 2 of 6 

[Claim 1]The request Records Department which is a server system for performing a data 
communications service, and records a request from an attested user on a personal digital assistant, 
The recorded information Monitoring Department which deletes record which inspected record of 
the request Records Department periodically and passed the term of validity, As opposed to a user 
who a request from a user is received, and the user inspects whether you are those by whom user 
authentication was already done with reference to said request Records Department, and has not 
been attested yet, Press for user authentication information, receive user authentication 
information, compare with management information registered a priori, and user authentication is 
performed, Thus, an access control section which returns as a response contents data demanded by 
receiving without a request by which user authentication was carried out, or a request from a user 
by which user authentication had already been carried out, If a user who performed user 
authentication for every ******** and contents, and once did user authentication also does fixed 
time lapse, by user authentication being required again. Information distribution server equipment 
characterized by a feasible thing without depending on environment of a terminal equipment for user 
access control whose safety is higher than mere user authentication. 
[Claim 2]The request Records Department which is a server system for performing a data 
communications service, and records a request from an attested user on a personal digital assistant, 
The recorded information Monitoring Department which deletes record which inspected record of 
the request Records Department periodically and passed the term of validity, A request evaluating 
part in which the user inspects whether you are those by whom user authentication was already 
done with reference to said request Records Department about a user who has accessed, A user 
authentication treating part which presses for user authentication information, receives user 
authentication information to a user who has not been attested yet, compares with management 
information registered a priori, and performs user authentication, A delivery information generation 
part which prepares or creates contents which should be distributed to a user, An access control 
section which receives ******** and a request from a user and returns suitable contents data as a 
response, If a user who performed user authentication for every ******** and contents, and once 
did user authentication also does fixed time lapse, by user authentication being required again. 
Information distribution server equipment characterized by a feasible thing without depending on 
environment of a terminal equipment for user access control whose safety is higher than mere user 
authentication. 

[Claim 3]Request record of one affair recorded on said request Records Department, The 
information distribution server equipment according to claim 1 or 2 which is a thing containing 
information which identifies demanded contents at least, information which identifies a user who has 
accessed and time when the request record was recorded, or a term when the request record is 
effective. 

[Claim 4]Information which identifies a user who is recorded on said request Records Department, 
and who has accessed, By using terminal identification information automatically added to request 
messages after acting as intermediary when a gateway unit which a cellular phone business operator 
installs relays request messages which a user sends, The information distribution server equipment 
according to claim 3 making it unnecessary for a user to perform a user-authentication-information 
input on a personal digital assistant while request record to the contents concerned of the user 
concerned is effective. 



[Translation done.] 
* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1 .This document has been translated by computer. So the translation may not reflect the original 
precisely. 
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2.**** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention]In personal digital assistant-oriented the information distribution system or 
data communications service using the Internet, this invention relates to the mechanism of making 
only a specific user doing inspection permission of the contents. 
[0002] 

[Description of the Prior Art]As for the distribute information which used the Internet today, it is 
common to build WWW (World Wide Web) technology as a base. The text file with a tag as which 
WWW technology expresses contents (it is henceforth described as a contents file), It can be said 
that it is realized in HTTP (HyperText Transfer Protocal) which is a communications protocol 
between the WWW server which sends out a contents file etc., the WWW browser which interprets 
and displays a contents file, and a WWW server and a WWW browser. As a contents file form, HTML 
(HyperText Markup Language) is typical. 

[0003]When a WWW server provides the contents data which is having access restriction specified 
in the information distribution system using the WWW technology for [ general ] a cellular phone, 
Usually, a WWW server acquires required ID and password from the client terminal which requires ID 
and a password of a requesting agency, and requires service in advance of sending of contents data. 
This procedure is realized using the structure called the basic authentication function with which a 
WWW server is provided as standard in many cases. 

[0004]In basic authentication, if the contents which are having access restriction specified are 
requested, a WWW server will be returned to status code of ANOSORAIZUDO request-origin. Then, 
the requested WWW browser displays the interface which enters user ID and a password, and sends 
the inputted user authentication information to a WWW server. A WWW server performs user 
authentication for received ID and the password with reference to a password management file. As a 
result, if it is checked that it is access from a registered user, the demanded contents data will be 
sent to a requesting agency. Since a WWW browser memorizes the entered user ID and the password, 
Henceforth, unless a browser is terminated by a client side, when the page concerned is accessed 
again and user authentication information is required again, the memorized user ID and the password 
are automatically sent to a server by work of a WWW browser. Namely, once it succeeds in user 
authentication, unless a browser will be terminated, a contents inspection of the server concerned is 
unconditionally possible for a client side. 

[0005]With the spread of cellular phones, the Internet was accessed from the cellular phone and the 
service which provides a mobile phone user with information has also begun from the site on the 
Internet. In order to provide such service, a cell phone service entrepreneur provides the Gateway 
which mediates between a portable telephone communication network and the Internet, performs 
required protocol conversion on this Gateway, and is making data exchange. However, since the 
browser which a cellular phone carries has various restrictions, it does not support the above- 
mentioned basic authentication in many cases. 
[0006] 

[Problem to be solved by the invention]There are two problems which are listed to below in the 
above-mentioned conventional technology. The first, I hear that user authentication using a basic 
authentication function cannot be performed to what is not supporting a basic authentication 
function like the browser of a cellular phone, and it is. Since the second point will not be again 
attested unless a browser is terminated if attestation is finished at the time of first time access, I 
hear that others' illegal use etc. have a problem also in respect of security, and it has them. 
[0007]Let it be SUBJECT to provide the information distribution server equipment in which the 
attestation by which it is made in consideration of such a problem, and for which it does not depend 
on terminal environment is possible for this invention, and shelf-life management of attestation is 
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moreover possible. 
[0008] 

[Means for solving problem]In order to solve an aforementioned problem, the 1 st mode of this 
invention, The request Records Department which is a server system for performing a data 
communications service, and records the request from an attested user on a personal digital 
assistant, The recorded information Monitoring Department which deletes the record which 
inspected record of the request Records Department periodically and passed the term of validity, As 
opposed to the user who the request from a user is received, and the user inspects whether you are 
those by whom user authentication was already done with reference to said request Records 
Department, and has not been attested yet, Press for user authentication information, receive user 
authentication information, compare with the management information registered a priori, and user 
authentication is performed, Thus, the access control section which returns as a response the 
contents data demanded by receiving without the request by which user authentication was carried 
out, or the request from a user by which user authentication had already been carried out, If the 
user who performed user authentication for every ******** and contents, and once did user 
authentication also does fixed time lapse, by user authentication being required again. It is 
information distribution server equipment characterized by a feasible thing without depending on the 
environment of a terminal equipment for the user access control whose safety is higher than mere 
user authentication. 

[0009]When a person's request record by which user authentication was carried out is recorded on 
said request Records Department and said recorded information Monitoring Department deletes 
periodically the request record which passed the term of validity, Since user authentication will be 
again required if the user who once did user authentication also does fixed time lapse, it becomes 
possible to perform user access control whose safety is higher than mere user authentication. The 
request from a user by which user authentication is not carried out is received, Since it presses for 
user authentication information by work of an access control section by the server side and user 
authentication information is received, even when the personal digital assistant side does not 
support the basic authentication function of a WWW server, user authentication can be carried out 
without being dependent on the environment of a user's terminal equipment. * NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1 .This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is an entire configuration figure of the information distribution server equipment 1 . 

[Drawing 2] It is a flow chart explaining operation of the access control section 10. 

[Drawing 3] It is an operation flow figure of the recorded information Monitoring Department 21. 

[Drawing 4] It is a figure showing the example of the request information recorded on the request 

Records Department 20. 

[Explanations of letters or numerals] 

I Information distribution server equipment 

7 Gateway 

8 Portable telephone communication network 

9 Internet 

10 Access control section 

I I Request evaluating part 
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12 Delivery information generation part 

13 User authentication treating part 

20 Request Records Department 

21 Recorded information Monitoring Department 

22 Access control file 

30 Contents data storage part 
90 Personal digital assistant 



[Translation done.] 
* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1 This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



DRAWINGS 



[Drawing 3] 
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[Drawing 2] 
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